diff options
| author | Emily <vcs@emily.moe> | 2020-03-23 17:58:36 +0000 |
|---|---|---|
| committer | Emily <vcs@emily.moe> | 2020-04-18 05:15:47 +0100 |
| commit | 695fd78ac45763b02ae4c68abda28974bb72c96b (patch) | |
| tree | cfcc35adf4be1ababcc06e1506fd0407227ad701 /nixos/tests/acme.nix | |
| parent | d0f04c1623ae74f256ff5ced77ac78c7fe3b6abc (diff) | |
| download | nixpkgs-695fd78ac45763b02ae4c68abda28974bb72c96b.tar nixpkgs-695fd78ac45763b02ae4c68abda28974bb72c96b.tar.gz nixpkgs-695fd78ac45763b02ae4c68abda28974bb72c96b.tar.bz2 nixpkgs-695fd78ac45763b02ae4c68abda28974bb72c96b.tar.lz nixpkgs-695fd78ac45763b02ae4c68abda28974bb72c96b.tar.xz nixpkgs-695fd78ac45763b02ae4c68abda28974bb72c96b.tar.zst nixpkgs-695fd78ac45763b02ae4c68abda28974bb72c96b.zip | |
nixos/tests/acme: use CAP_NET_BIND_SERVICE
Diffstat (limited to 'nixos/tests/acme.nix')
| -rw-r--r-- | nixos/tests/acme.nix | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/nixos/tests/acme.nix b/nixos/tests/acme.nix index 032432287bd..693f02962f4 100644 --- a/nixos/tests/acme.nix +++ b/nixos/tests/acme.nix @@ -33,8 +33,7 @@ in import ./make-test-python.nix { serviceConfig = { ExecStart = "${pkgs.pebble}/bin/pebble-challtestsrv -dns01 ':53' -defaultIPv6 '' -defaultIPv4 '${nodes.webserver.config.networking.primaryIPAddress}'"; # Required to bind on privileged ports. - User = "root"; - Group = "root"; + AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ]; }; }; }; |